Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BI3sgIaTUM9B3H9IM95i6cQ79tI.roa
File: BI3sgIaTUM9B3H9IM95i6cQ79tI.roa (raw, json)
Hash identifier: lcX08Q/BWVZC00vOiV25sRoANDFaOIFw5t/+Q+BGNvA=
Subject key identifier: 04:8D:EC:80:86:93:50:CF:41:DC:7F:48:33:DE:62:E9:C4:3B:F6:D2
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C62AE227F1F50F4F38594F2B26A60
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BI3sgIaTUM9B3H9IM95i6cQ79tI.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45051
IP address blocks: 91.203.168.0/22 maxlen: 22
91.203.168.0/24 maxlen: 24
91.203.169.0/24 maxlen: 24
91.203.170.0/24 maxlen: 24
91.203.171.0/24 maxlen: 24
212.75.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:ae:22:7f:1f:50:f4:f3:85:94:f2:b2:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=048dec80869350cf41dc7f4833de62e9c43bf6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:63:5f:3d:21:5f:cf:83:b7:7b:87:81:74:
70:33:b2:6c:6e:0e:62:0e:c2:6b:2b:f1:26:c5:d2:
2c:7d:1d:a7:c2:d1:a5:db:1e:09:f7:d3:44:26:ea:
ad:51:f5:3d:24:88:05:3a:40:b8:d0:c5:de:39:46:
e6:0a:5c:d3:74:07:fd:bf:29:91:16:3d:ad:ed:59:
1d:b2:d9:87:cf:e0:ee:73:58:12:e0:74:b3:ba:94:
f7:07:09:e1:0e:5a:0b:dc:82:b6:2d:84:0b:8a:33:
fd:d9:68:e7:5e:cf:6e:c3:06:ce:5e:19:c2:3b:4a:
53:19:b3:52:cc:58:04:97:12:5b:ad:51:f2:db:0b:
04:57:e5:9b:85:b6:73:39:8f:25:d4:59:20:19:1d:
ea:b6:20:d7:33:06:19:6a:de:fa:b1:b9:27:7b:12:
f6:71:3f:4f:6a:97:c0:f5:42:9b:54:8e:cb:cf:39:
cd:d3:b5:d3:16:60:2e:cd:65:7a:80:65:27:4e:7c:
75:8d:08:de:87:32:1f:e4:34:f6:8c:98:2e:bf:bf:
c3:d3:0b:77:3c:bb:4b:09:84:07:5d:c2:f3:77:03:
ab:b4:ac:d5:b1:dd:f5:3f:eb:4e:29:ea:79:6a:86:
ef:85:0e:bc:6e:dc:cb:52:a2:52:cb:00:5f:4c:c1:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:EC:80:86:93:50:CF:41:DC:7F:48:33:DE:62:E9:C4:3B:F6:D2
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/BI3sgIaTUM9B3H9IM95i6cQ79tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.168.0/22
212.75.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:03:e8:cd:57:6e:24:f6:ea:44:e5:f8:53:43:4c:e3:20:36:
28:e7:b9:43:bc:f7:bc:cc:1c:3f:a4:46:b1:f4:25:f8:96:70:
0b:04:8d:01:99:a3:eb:6e:27:5f:a1:4c:24:fb:f5:03:81:0d:
fa:ac:74:be:73:7d:6c:ed:c3:e3:a4:b0:9b:cc:5b:44:35:d2:
d2:fe:64:e5:91:57:3e:2b:1d:3b:dd:b6:95:99:da:f0:4a:63:
36:9e:dc:e2:64:f5:ad:66:3d:db:3d:96:c6:84:3a:3d:1a:7c:
12:ce:e3:73:df:28:45:31:f6:e8:63:94:79:d2:8d:41:37:4f:
a0:12:fc:5c:a6:0e:8e:da:76:74:31:9b:01:cd:13:59:99:06:
5e:fe:42:5f:a9:ec:21:c9:b1:76:ad:90:c7:2a:c7:d7:cd:dd:
2c:a9:e1:b4:ec:e9:c5:44:8c:5f:52:6b:d5:f2:32:78:67:32:
6a:b2:3e:09:10:00:93:55:07:fd:3b:0a:d3:73:cc:fe:20:ef:
ac:45:d8:52:10:e0:3b:50:23:7e:ff:2b:95:9e:31:6f:07:89:
0d:d4:01:ae:fd:82:68:c6:e2:dd:7d:e8:73:97:b8:cd:b2:89:
c1:9e:fe:ae:7d:32:ff:2e:42:7f:ce:70:41:22:55:92:c4:ec:
4f:a1:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:54 2025 by rpki-client